Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse code

Small fix to detect_munged_arguments to make Thiagi game shells work.

They have a '..' in the arguments, so we are allowing one of these only.

I wonder if this is Ger's problem too.
  • Loading branch information...
commit 14824286cb5460a61e0dfb16c475040a2d899ddc 1 parent 3f4e0d9
authored July 11, 2004

Showing 1 changed file with 1 addition and 1 deletion. Show diff stats Hide diff stats

  1. 2  lib/weblib.php
2  lib/weblib.php
@@ -510,7 +510,7 @@ function validate_email ($address) {
510 510
 }
511 511
 
512 512
 function detect_munged_arguments($string) {
513  
-    if (ereg('\.\.', $string)) { // check for parent URLs
  513
+    if (substr_count($string, '..') > 1) {   // We allow one '..' in a URL
514 514
         return true;
515 515
     }
516 516
     if (ereg('[\|\`]', $string)) {  // check for other bad characters

0 notes on commit 1482428

Please sign in to comment.
Something went wrong with that request. Please try again.